JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

49.228.84.66

Activity Trending Down

Abuse Confidence Score

3% Caution

13 reports

12 reporters · latest 1 week ago

ISP: AIS Fibre
Usage Type: Fixed Line ISP
ASN: AS133481
Domain Name: ais.th
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

13 from 12 distinct reporters

First reported

October 19th 2025

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇷🇺 Russian Federation 1

Most common categories Bad Web Bot 1 Web App Attack 1 Hacking 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-03 16:15:03 UTC · (1 week ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /wishlist/index/add/product/6155/form_key/aEgLiWKBlNMI7bEX/ \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/535.0 (KHTML, like Gecko) CriOS/53.0.856.0 Mobile/60D920 Safari/535.0 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇵🇱 IROK	2026-02-19 03:57:15 UTC · (8 months ago)	2026-02-19T04:51:32.178950 pclab24.pl sshd[2007551]: Failed password for root from 49.228.84.66 port 38084 ssh2 2026-02-19T04:52:49.400650 pclab24.pl sshd[2007793]: Invalid user anthony from 49.228.84.66 port 35136 2026-02-19T04:52:49.403686 pclab24. ... show more 2026-02-19T04:51:32.178950 pclab24.pl sshd[2007551]: Failed password for root from 49.228.84.66 port 38084 ssh2 2026-02-19T04:52:49.400650 pclab24.pl sshd[2007793]: Invalid user anthony from 49.228.84.66 port 35136 2026-02-19T04:52:49.403686 pclab24.pl sshd[2007793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.66 2026-02-19T04:52:51.005265 pclab24.pl sshd[2007793]: Failed password for invalid user anthony from 49.228.84.66 port 35136 ssh2 2026-02-19T04:57:09.349217 pclab24.pl sshd[2009087]: Invalid user autrede from 49.228.84.66 port 34586 ... show less	SSH
🇩🇪 groupnet.at	2026-02-19 03:52:08 UTC · (8 months ago)	Feb 19 04:52:06 routing0301 sshd[1328203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.66 Feb 19 04:52:06 routing0301 sshd[1328203]: Invalid user claude from 49.228.84.66 port 51688 Feb 19 04:52: ... show more Feb 19 04:52:06 routing0301 sshd[1328203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.66 Feb 19 04:52:06 routing0301 sshd[1328203]: Invalid user claude from 49.228.84.66 port 51688 Feb 19 04:52:08 routing0301 sshd[1328203]: Failed password for invalid user claude from 49.228.84.66 port 51688 ssh2 ... show less	Brute-Force SSH
🇩🇪 SELECT-IT Beratung und IT Dienstleistung GmbH	2026-02-19 03:51:45 UTC · (8 months ago)	2026-02-19T04:51:42.947922+01:00 git-lab sshd[911069]: Invalid user 3 from 49.228.84.66 port 39338 2026-02-19T04:51:42.950628+01:00 git-lab sshd[911069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.8 ... show more 2026-02-19T04:51:42.947922+01:00 git-lab sshd[911069]: Invalid user 3 from 49.228.84.66 port 39338 2026-02-19T04:51:42.950628+01:00 git-lab sshd[911069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.66 2026-02-19T04:51:44.687974+01:00 git-lab sshd[911069]: Failed password for invalid user 3 from 49.228.84.66 port 39338 ssh2 ... show less	Brute-Force SSH
🇩🇪 ValtonTahiri	2026-02-19 03:46:06 UTC · (8 months ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Number of sessions: 4 • Credentials: adrian:adrian, vtatis:123456, vpsuser:123, stefano:stefano • Number of login attempts: 4 • Client: SSH-2.0-libssh_0.11.1	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-19 03:40:26 UTC · (8 months ago)	(sshd) Failed SSH login from 49.228.84.66 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 18 21:35:03 13617 sshd[26844]: Invalid user adrian from 49.228.84.66 po ... show more (sshd) Failed SSH login from 49.228.84.66 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Feb 18 21:35:03 13617 sshd[26844]: Invalid user adrian from 49.228.84.66 port 30468 Feb 18 21:35:06 13617 sshd[26844]: Failed password for invalid user adrian from 49.228.84.66 port 30468 ssh2 Feb 18 21:37:07 13617 sshd[27074]: Invalid user soporte from 49.228.84.66 port 34220 Feb 18 21:37:08 13617 sshd[27074]: Failed password for invalid user soporte from 49.228.84.66 port 34220 ssh2 Feb 18 21:40:09 13617 sshd[27321]: Invalid user dbuser from 49.228.84.66 port 36348 show less	Brute-Force SSH
🇫🇷 binner	2026-02-19 03:38:26 UTC · (8 months ago)	SSH brute-force attack detected by Fail2ban	Brute-Force SSH
🇺🇸 Silly Development	2026-02-19 03:36:41 UTC · (8 months ago)	2026-02-19T03:36:08.626302+00:00 kansas sshd[3495623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.66 2026-02-19T03:36:10.809630+00:00 kansas sshd[3495623]: Failed password for invalid user adrian ... show more 2026-02-19T03:36:08.626302+00:00 kansas sshd[3495623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.228.84.66 2026-02-19T03:36:10.809630+00:00 kansas sshd[3495623]: Failed password for invalid user adrian from 49.228.84.66 port 39540 ssh2 2026-02-19T03:36:41.178574+00:00 kansas sshd[3495631]: Invalid user Guest from 49.228.84.66 port 34462 ... show less	Brute-Force SSH
Anonymous	2026-02-19 03:24:29 UTC · (8 months ago)	$f2bV_matches	Brute-Force SSH
🇫🇮 Ticlem	2026-02-09 18:19:28 UTC · (9 months ago)	2026-02-09T18:40:56.207459+01:00 clement-turlure kernel: [81266.193638] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=49.228.84.66 DST=95.216.21.136 LEN=159 TOS=0x00 PREC=0x00 TTL=112 ID=43943 PROTO=UDP SPT=49001 DPT ... show more 2026-02-09T18:40:56.207459+01:00 clement-turlure kernel: [81266.193638] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=49.228.84.66 DST=95.216.21.136 LEN=159 TOS=0x00 PREC=0x00 TTL=112 ID=43943 PROTO=UDP SPT=49001 DPT=6881 LEN=139 2026-02-09T19:00:26.120944+01:00 clement-turlure kernel: [82436.105892] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=49.228.84.66 DST=95.216.21.136 LEN=170 TOS=0x00 PREC=0x00 TTL=112 ID=30435 PROTO=UDP SPT=49001 DPT=6881 LEN=150 2026-02-09T19:19:27.435317+01:00 clement-turlure kernel: [83577.418654] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=49.228.84.66 DST=95.216.21.136 LEN=170 TOS=0x00 PREC=0x00 TTL=112 ID=55463 PROTO=UDP SPT=49001 DPT=6881 LEN=150 ... show less	Port Scan
Anonymous	2025-10-19 02:57:44 UTC · (1 year ago)	2025-10-19T02:54:39.043347+00:00 ubuntu-4gb-hel1-2 sshd[596564]: Invalid user student from 49.228.84.66 port 42692 2025-10-19T02:55:38.235528+00:00 ubuntu-4gb-hel1-2 sshd[596852]: Invalid user jahan from 49.228.84.66 port 43954 2025-10-19T02:56:26.90 ... show more 2025-10-19T02:54:39.043347+00:00 ubuntu-4gb-hel1-2 sshd[596564]: Invalid user student from 49.228.84.66 port 42692 2025-10-19T02:55:38.235528+00:00 ubuntu-4gb-hel1-2 sshd[596852]: Invalid user jahan from 49.228.84.66 port 43954 2025-10-19T02:56:26.907850+00:00 ubuntu-4gb-hel1-2 sshd[597106]: Invalid user anas from 49.228.84.66 port 56830 2025-10-19T02:56:49.405868+00:00 ubuntu-4gb-hel1-2 sshd[597234]: Invalid user deployer from 49.228.84.66 port 45456 2025-10-19T02:57:43.532074+00:00 ubuntu-4gb-hel1-2 sshd[597479]: Invalid user lee from 49.228.84.66 port 57582 ... show less	Brute-Force SSH
🇺🇸 kosada.com	2025-10-19 02:56:51 UTC · (1 year ago)	SSH password guessing: Invalid user deployer from 49.228.84.66 port 51286	Brute-Force SSH
🇺🇸 bigscoots.com	2025-10-19 02:56:26 UTC · (1 year ago)	(sshd) Failed SSH login from 49.228.84.66 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Oct 18 21:54:23 14260 sshd[18065]: Invalid user ftpuser from 49.228.84.66 p ... show more (sshd) Failed SSH login from 49.228.84.66 (TH/Thailand/49-228-84-0.24.nat.cwdc-cgn03.myaisfibre.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Oct 18 21:54:23 14260 sshd[18065]: Invalid user ftpuser from 49.228.84.66 port 49556 Oct 18 21:54:25 14260 sshd[18065]: Failed password for invalid user ftpuser from 49.228.84.66 port 49556 ssh2 Oct 18 21:55:22 14260 sshd[18145]: Invalid user student from 49.228.84.66 port 51788 Oct 18 21:55:24 14260 sshd[18145]: Failed password for invalid user student from 49.228.84.66 port 51788 ssh2 Oct 18 21:56:16 14260 sshd[18230]: Invalid user jahan from 49.228.84.66 port 39478 show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.153.34.119

🇨🇳 42.176.132.25

🇺🇸 162.216.150.11

🇬🇧 81.19.219.196

🇺🇸 52.90.108.159

🇺🇸 34.75.65.22

🇵🇱 31.22.102.19

🇺🇸 20.65.178.72

🇷🇴 2.57.121.25

🇩🇪 2003:df:b742:ed7:7c86:9411:fd63:559e

🇺🇸 216.25.90.34

🇳🇱 193.47.62.69

🇧🇷 187.63.84.57

🇺🇸 134.122.125.153

🇺🇸 103.4.248.12

🇵🇱 95.214.53.157

🇳🇱 94.102.49.190

🇷🇴 80.94.92.179

🇩🇪 69.5.169.109

🇺🇸 66.132.172.129